This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/fahVjq3eu8sEDPnB9DGaewCoR3U.roa File: fahVjq3eu8sEDPnB9DGaewCoR3U.roa (raw, json) Hash identifier: 6HoCDkJGCusec6kjy3BuDvxzGPnCLRl/jJWagjqWKAM= Subject key identifier: 7D:A8:55:8E:AD:DE:BB:CB:04:0C:F9:C1:F4:31:9A:7B:00:A8:47:75 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019AE3AF39658F1819163605541C30FC55A6 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/fahVjq3eu8sEDPnB9DGaewCoR3U.roa Signing time: Wed 03 Dec 2025 10:08:22 +0000 ROA not before: Wed 03 Dec 2025 10:08:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211373 IP address blocks: 89.190.151.0/24 maxlen: 24 139.28.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:af:39:65:8f:18:19:16:36:05:54:1c:30:fc:55:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 3 10:08:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7da8558eaddebbcb040cf9c1f4319a7b00a84775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:65:7f:f4:e6:ab:f5:de:9f:69:45:d2:fa: 1a:e6:98:f1:e7:79:f3:df:85:81:aa:44:c5:46:33: 85:68:92:c1:27:74:08:28:b6:55:95:16:df:bd:e3: fb:f5:ca:c7:15:12:11:84:fa:92:0c:26:e2:2e:cf: c6:c6:41:1a:07:29:bc:f0:43:41:ac:99:ac:bf:49: 73:1d:1b:92:11:e1:47:eb:30:eb:df:04:83:06:5b: 81:f0:b2:e2:64:28:1b:88:44:c5:8a:19:c0:ce:ff: bc:f6:ff:ff:5d:a2:e0:03:52:ba:bc:32:3f:3a:b3: 0d:68:f6:a2:1b:26:e3:56:f0:eb:44:50:91:50:f1: f7:b8:89:e8:51:8c:2d:72:2c:02:16:ec:16:9d:f2: d1:41:47:08:2b:4b:f8:04:2a:90:f5:f9:21:0f:31: 50:77:b8:7d:f9:1c:52:0a:c1:0c:60:8a:c3:9e:52: 3b:06:86:72:f1:f6:44:d1:7d:62:dc:08:14:b7:2e: a8:0a:fb:81:2c:10:fe:37:79:57:36:97:60:38:5a: d0:0d:d9:ad:cb:df:80:ad:b0:94:03:e0:16:10:96: c7:b4:80:e8:79:cb:b6:95:9f:73:8c:d8:c9:20:c6: 9d:b0:fb:14:37:80:a2:0b:b4:16:81:d9:8b:f2:a8: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A8:55:8E:AD:DE:BB:CB:04:0C:F9:C1:F4:31:9A:7B:00:A8:47:75 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/fahVjq3eu8sEDPnB9DGaewCoR3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.151.0/24 139.28.172.0/24 Signature Algorithm: sha256WithRSAEncryption 87:fb:30:94:94:e4:bc:d9:b3:8a:f4:32:33:db:20:2d:29:84: 66:ad:39:38:65:b2:f0:97:bd:6d:b6:09:2d:9d:5c:58:67:3c: b5:b9:c0:98:32:73:f3:29:c0:83:e5:71:ed:3e:d3:fa:ee:f5: 61:f3:5e:d9:0b:c8:d8:2c:77:46:7e:12:74:0d:0c:df:23:8c: 09:07:c9:3f:a1:57:6a:e2:61:68:d8:d2:53:f2:9d:4a:47:6d: b3:85:52:3d:63:95:5d:98:b8:40:2e:e0:0a:44:c2:7a:1a:a1: 96:a0:c3:2b:2a:73:3e:d0:bb:93:2e:da:14:48:47:16:4d:7a: d5:d4:41:d8:b5:69:1b:b7:00:a0:00:7f:c1:5c:73:79:1a:a4: a0:fd:86:a8:f2:66:da:56:e6:2b:1f:99:75:2c:1f:30:22:20: 26:c1:64:99:0b:a1:b6:ac:8f:21:06:bf:8a:65:39:f9:89:bf: 18:24:0b:fe:61:60:df:05:ef:4f:cf:7c:46:7b:a9:32:ac:fd: cd:2e:be:3d:98:57:27:8f:5e:f5:81:a1:1a:1a:e8:30:47:34: a9:98:29:25:62:ca:01:6a:30:fa:4a:8d:fb:4f:15:32:8f:d2: 57:9c:d9:a0:97:a4:50:0d:08:7f:60:5b:6a:38:bb:4a:7c:aa: c8:ef:25:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrjrzlljxgZFjYFVBww/FWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjAzMTAwODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGE4NTU4ZWFkZGViYmNiMDQwY2Y5YzFmNDMxOWE3YjAwYTg0Nzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kplf/Tmq/Xen2lF0voa5pjx53nz 34WBqkTFRjOFaJLBJ3QIKLZVlRbfveP79crHFRIRhPqSDCbiLs/GxkEaBym88ENB rJmsv0lzHRuSEeFH6zDr3wSDBluB8LLiZCgbiETFihnAzv+89v//XaLgA1K6vDI/ OrMNaPaiGybjVvDrRFCRUPH3uInoUYwtciwCFuwWnfLRQUcIK0v4BCqQ9fkhDzFQ d7h9+RxSCsEMYIrDnlI7BoZy8fZE0X1i3AgUty6oCvuBLBD+N3lXNpdgOFrQDdmt y9+ArbCUA+AWEJbHtIDoecu2lZ9zjNjJIMadsPsUN4CiC7QWgdmL8qhU4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH2oVY6t3rvLBAz5wfQxmnsAqEd1MB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZmFoVmpxM2V1OHNFRFBuQjlER2Fld0NvUjNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWb6XAwQA ixysMA0GCSqGSIb3DQEBCwUAA4IBAQCH+zCUlOS82bOK9DIz2yAtKYRmrTk4ZbLw l71ttgktnVxYZzy1ucCYMnPzKcCD5XHtPtP67vVh817ZC8jYLHdGfhJ0DQzfI4wJ B8k/oVdq4mFo2NJT8p1KR22zhVI9Y5VdmLhALuAKRMJ6GqGWoMMrKnM+0LuTLtoU SEcWTXrV1EHYtWkbtwCgAH/BXHN5GqSg/Yao8mbaVuYrH5l1LB8wIiAmwWSZC6G2 rI8hBr+KZTn5ib8YJAv+YWDfBe9Pz3xGe6kyrP3NLr49mFcnj171gaEaGugwRzSp mCklYsoBajD6So37TxUyj9JXnNmgl6RQDQh/YFtqOLtKfKrI7yW2 -----END CERTIFICATE-----Generated at Fri Dec 5 07:01:37 2025 by rpki-client